What are the 3 major components of SNMP?
SNMP Manager
SNMP Agent
MiB
SNMP manager
The SNMP manager controls and monitors the devices within the network by using SNMP. The SNMP manager can be part of an NMS such as Cisco Prime Infrastructure.
SNMP agent
The SNMP agent is the component that is run directly on the device and maintains data and reports this data (if needed) to the SNMP manager
MiB
MIB is a virtual information storage location that contains collections of managed objects. Within the MIB, there are objects that relate to different defined MIB modules (for example, the interface module).
What is the major flaw with SNMPv1?
it sends everything in plain text with the community string being the only authentication
What changed in SNMPv2?
adds bulk collection mechanism but still uses plain text community string authentication
What is new in SNMPv3?
It adds support for strong authentication and private communication between managed entities. The key security additions to SNMPv3 follow:
Can use MD5 or SHA hashes for authentication
Can encrypt the entire packet
Can guarantee message integrity
SNMP configurations tasks
Task
Command Syntax
Configure the SNMP contact information
Router(config)# snmp-server contact text
Configure the SNMP device location
Router(config)# snmp-server location text
Configure the SNMP device serial number
Router(config)# snmp-server chassis-id number
Display the current SNMP contact information
Router# show snmp contact
Display the current SNMP device location
Router# show snmp location
Display the current SNMP device serial number
Router# show snmp chassis
command to set syslog server
logging ip of syslog server
command to serverity level required a messaged to sent to syslog server
logging trap severity level
What is netflow?
A feature of some routers that allows them to categorize incoming packets into flows. Because packets in a flow often can be treated in the same way, this classification can be used to bypass some of the work of the router and accelerate its switching operation.
command to enable netflow on an interface
ip flow {ingress | egress}
command to set recipient of netflow data
ip flow-export destination ip-address udp-port
command to specify the netflow version the export uses
ip flow-export version version
